High
CVE-2022-47599
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2022-47600
Mass Email To users <= 1.1.4 - Unauthenticated Reflected Cross-Site Scripting via 'entrant'
Medium
CVE-2022-46821
Emails & Newsletters with Jackmail <= 1.2.22 - Authenticated (Subscriber+) CSV Injecton
Medium
CVE-2022-47604
AJAX Thumbnail Rebuild <= 1.13 - Missing Authorization
Medium
CVE-2023-2275
WooCommerce Multivendor Marketplace – REST API <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order/Order Note Disclosure, Order Note Addition via REST API
High
CVE-2023-1347
Customizer Export/Import <= 0.9.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-43450
Stream <= 3.9.2 - Missing Authorization via load_alerts_settings
Medium
CVE-2023-2289
wordpress vertical image slider plugin <= 1.2.16 - Reflected Cross-Site Scripting
High
33b92a86-bb3e-4307-b2cb-7dfde56505cc
Thumbnail Slider With Lightbox <= 1.0.17 - Reflected Cross-Site Scripting
Medium
CVE-2023-1835
Ninja Forms Contact Form <= 3.6.21 - Reflected Cross-Site Scripting via 'title'
Medium
CVE-2023-31086
Simple Giveaways <= 2.46 - Cross-Site Request Forgery
Medium
CVE-2023-27627
Woocommerce Email Report <= 2.4 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-23727
Formilla Live Chat <= 1.3.0 - Authenticated (Administrator+) Cross-Site Scripting via 'FormillaID'
Medium
CVE-2023-1011
ChatBot <= 4.4.4 - Unauthenticated Stored Cross-Site Scripting via Cross-Site Request Forgery
Medium
CVE-2023-23657
Mail Subscribe List <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via smlsubform shortcode
Medium
CVE-2023-0233
ActiveCampaign – Forms, Site Tracking, Live Chat <= 8.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-23682
EZP Maintenance Mode <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
High
CVE-2022-4943
miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change
Medium
CVE-2023-2179
WooCommerce Order Status Change Notifier <= 1.1.0 - Authenticated (Subscriber+) Arbitrary Order Status Update
Critical
CVE-2022-46818
Email posts to subscribers <= 6.2 - Unauthenticated SQL Injection
Medium
CVE-2022-47441
Charitable <= 1.7.0.10 - Reflected Cross-Site Scripting
High
CVE-2023-1549
Ad Inserter <= 2.7.25 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2022-43490
Stream <= 3.9.2 - Cross-Site Request Forgery
Medium
CVE-2023-2159
CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.